Localized closed timelike curves can perfectly distinguish quantum states 
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We show that qubits traveling along closed timelike curves are a resource that a party can exploit 
to distinguish perfectly any set of quantum states. As a result, an adversary with access to closed 
timelike curves can break any prepare-and-measure quantum key distribution protocol. Our result 
also implies that a party with access to closed timelike curves can violate the Holevo bound. 
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Introduction — The theory of general relativity points 
to the possible existence of closed timelike curves (CTCs) 
[TJ The grandfather paradox is one criticism raised 
to their existence, but Deutsch resolved this paradox by 
presenting a method for finding self-consistent solutions 
of CTC interactions [3] . 

Recently, several quantum information researchers 
have assumed that CTCs exist and have examined the 
consequences of this assumption for computation [31 El E] ■ 
Brun showed that a classical treatment (assuming a lack 
of contradictions) allows NP-hard problems to be com- 
puted with a polynomial number of gates j4]. Bacon 
followed with a purely quantum treatment that demon- 
strates the same reduction of NP-hard problems to P, 
along with a sketch of how to perform this reduction in 
a fault-tolerant manner [5] . Aaronson and Watrous have 
recently established that either classical or quantum com- 
puters interacting with closed timelike curves can com- 
pute any function in P SPACE in polynomial time [BJ. 

In this Letter, we show how a party with access to 
CTCs, or a "CTC-assisted" party, can perfectly distin- 
guish among a set of non-orthogonal quantum states. 
The result has implications for fundamental protocols 
in quantum communication because a simple corollary 
is that a CTC-assisted party can break any prepare- 
and-measure quantum key distribution protocol [7||5]|S]. 
(The security of such a scheme relies on the information- 
disturbance tradeoff for identifying quantum states.) 
Furthermore, the capacity for quantum systems to carry 
classical information becomes unbounded. 

Our work here raises fundamental questions concern- 
ing the nature of a physical world in which closed time- 
like curves exist because it challenges the postulate of 
quantum mechanics that non-orthogonal states cannot 
be perfectly distinguished. A full theory of quantum 
gravity would have to resolve this apparent contradic- 
tion between the implication of CTCs and the laws of 
quantum mechanics. Note that any alternative source of 
nonlinearity would raise similar questions. 

We structure this Letter as follows. First, we give some 
background on Deutsch's formalism regarding CTCs in 



quantum information theory [3]. We then show how to 
distinguish the non-orthogonal states |0) and |— ) where 
|— ) = (|0) — |l))/v2 and follow by showing how to dis- 
tinguish the "BB8T' states |0), |1), |+), and |-) where 
|+) = (|0) + |l))/v2- Our main theorem then shows that 
a CTC-assisted party can perfectly distinguish among an 
arbitrary set of states. We end by discussing how a CTC- 
assisted party can break Holevo's bound [10] , 

Background — Qubits traveling around closed timelike 
curves (CTC qubits) may give rise to highly nonintuitivc 
behavior, but Deutsch showed how to avoid certain para- 
doxes by imposing a self-consistency condition [3] . This 
self-consistency condition requires that the input density 
matrix of a CTC quantum system match its output den- 
sity matrix following its interaction with another system: 

Pctc = Tr sys {V(\yj) (y^\ <g p CTC ) V*}, (1) 

where is the input state of the chronology-respecting 
system, the matrix pcic is the initial density matrix of 
the CTC quantum system before the two systems inter- 
act, and V is the interaction unitary. The expression on 
the right hand side of ([!]) is the partial density matrix of 
the CTC system after the interaction. The output state 
of the chronology-respecting system is then 

Pout = Tr CT c{F (|V> (V>l <8 Pctc) V^}. (2) 

The output state is in general a nonlinear function of the 
input state \ip), because p ut depends on both and 
Pctc, and Pctc also depends on It is this nonlin- 
earity that enables us to transcend the usual limitations 
of quantum mechanics. 

Deutsch showed in Ref. [3] that there always exists a 
self-consistent solution to Eq. 0, but it does not nec- 
essarily have to be unique. In the examples and main 
theorem of this Letter, we construct an interaction and 
measurement scheme to distinguish perfectly any set of 
non-orthogonal states. To achieve this result, we engi- 
neer the density matrix of the CTC system to be unique 
as well as self-consistent. 

Distinguishing two non- orthogonal states — We first 
show how to distinguish the non-orthogonal states |0) 
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FIG. 1: The above circuit can perfectly distinguish the non- 
orthogonal states |0) and |— }. The first qubit in state \ip) 
is the unknown qubit (jO) or |— )) and the second qubit with 
density matrix pctc travels along a closed timelike curve. The 
double vertical bars on the bottom left and right indicate the 
past and future mouths of the wormhole for the CTC. 



and |— ) without uncertainty or error. Let \tp) denote 
the unknown initial state (|0) or |— )) that lives on a sys- 
tem A. Suppose that we have access to one CTC qubit 
for a length of time and let B denote its corresponding 
system. The desired interaction is as follows: 

1. Swap systems A and B. 

2. Perform a controlled-Hadamard with system A as 
the control and system B as the target. 

3. Measure system A in the computational basis. 

System B "disappears" after some time because it 
travels along a closed timelike curve and enters the fu- 
ture mouth of its wormhole. The measurement of system 
A occurs after this point. A measurement result of zero 
reveals that = |0), and a measurement result of one 
reveals that \ip) = |— )■ Fig. [Tjdepicts the quantum circuit 
for this procedure. 

Let us describe the operation of the circuit in Fig. [T] 
by tracing backward through it. First suppose that the 
final state of the chronology-respecting qubit is |0) (0|. 
The circuit is then simply a SWAP gate because the 
Hadamard does not act on the CTC qubit. Therefore, 
self-consistency of the initial and final state of the CTC 
qubit implies that pctc = W) (VI = |0) (0| because the 
two qubits are invariant under the SWAP operation. 

Alternatively, suppose the final state of the chronology- 
respecting qubit is |1) (1|. Then the controlled-Hadamard 
reduces to application of the Hadamard gate on the CTC 
qubit. The input state to the Hadamard gate is (ifj\ 
(because of the SWAP), and the output state is pctc = 
|1) (1| (again, because of the SWAP). This action occurs 
when \f/,) (V| - h) H- 

It only remains to show that these self-consistent solu- 
tions for pctc are unique. Let 

Pctc = a |0) (0| + /3 |0) (1| + 7 |1) (0| + 6 |1) (1| . 

For pctc to be a density matrix, it must be Hermi- 
tian, positive semi-definite, and have trace 1; these con- 
ditions imply that a, 6 must be non-negative reals such 
that a + 6 = 1, that 7 = /?*, and that |/3| 2 < aS. 
Suppose \ip) (ip\ = |0)(0|. Then S = and a = 1 
because self-consistency requires that a = a + 5/2. 
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FIG. 2: The above circuit can perfectly distinguish the BB84 
states |0), |1), |+), and |— ). The circuit uses the standard 
quantum circuit notation from Ref. and we define the 
unitaries Uoo, U01, Uw, and Uu in j3j. 



Thus pctc = |0) (0| is the only solution. Now sup- 
pose \<ip) (VI = |-) (-|. Then a = and 5 = 1 be- 
cause self-consistency requires that 5 = 5 + a/2. Thus 
Pctc = |1) (1| is the only solution. 

Straightforward modifications to the unitaries in Fig.[l] 
can be introduced to distinguish between any two non- 
orthogonal states. This scheme then breaks the security 
of the B92 quantum key distribution protocol [5] . Even 
with no loss on the quantum channel, a CTC-assisted 
adversary can learn the identity of every signal that Alice 
transmits and then prepare and transmit the same state 
to Bob. The adversary gains full information without 
producing any disturbance. 

Distinguishing the BB84 states — We next consider how 
to distinguish the four BB84 states {|0} , |1) , |+) , |-}}. 
Our scheme first appends an ancillary state |0) to the 
unknown state \ip) (one of the four BB84 states) and 
then uses two CTC qubits to effect the following map: 



|00) -> |00) 
|10) - |01) 



|+0>-|10>, 

l-o) -|H). 



That is, by measuring the output of the chronology- 
respecting qubits in the computational basis, the result 
a = reveals that the unknown state \tfj) is a Z-eigenstate 
with eigenvalue (— l) b , and a = 1 reveals that \ip) is an 
X-eigenstate with eigenvalue (— l) fc . We claim that the 
circuit in Fig. [2] implements such a mapping, where we 
define the unitaries Uqq, Uqi, Uiq, and Uu as follows: 

U Q0 = SWAP, 
CT i = X ® X, 
U w = (X®I)o (H®I), 
Uu = {X®H)o (SWAP). 



(3) 



The circuit in Fig. [2] consists of two SWAPs between 
the chronology-respecting qubits and the CTC qubits, 
followed by four controlled unitaries, such that a dis- 
tinct unitary acts on the CTC qubits for each output 
state \ab). For each input state, the desired output of 
the chronology-respecting qubits corresponds to a self- 
consistent solution for the CTC qubits. The argument 
that the solution is unique proceeds as before: we con- 
sider a general density matrix for pctc 1 and we then show 
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that all but one of the diagonal elements in the computa- 
tional basis must be zero. This result implies that pctc 
is pure and equal to a computational basis state. 

As in the previous section, the circuit in Fig. [2] ren- 
ders insecure any quantum key distribution protocol us- 
ing these states [9] . An adversary can learn the basis 
and bit values of each signal state (and then prepare an 
identical state) without introducing any loss or distur- 
bance in the quantum transmission. 

General state distinguishability — We now present our 
main theorem and proof, that constructively demon- 
strates how to use a CTC system to distinguish perfectly 
an arbitrary number of distinct quantum states. 

Theorem. Suppose there is a set {lipj}}^^ 1 °f N dis- 
tinct states in a space of dimension N . Suppose we have 
access to an N -dimensional CTC system in a closed loop. 
Then we can implement the following map: 

Vj 1^-) - \j) 

where the states \j) are a standard orthonormal basis for 
the N -dimensional space. 

Proof. We want to demonstrate a mapping of — > \j) 
for < j < N — 1, where {\j}} forms a standard or- 
thonormal basis for the input space. We utilize a closed 
timclike curve (CTC) containing an A^-dimcnsional sys- 
tem in a closed loop. We prepare the input system in one 
of the states \ipj). We then let it interact with the CTC 
system via a unitary transformation V. The output state 
will be | j) . We choose V as follows: 

1. First, swap the input system with the CTC system. 

2. Next, apply the following controlled unitary from 
the system to the CTC: 

N-l 

(M®u k , 

where the {Uk} are a set of N unitary transforma- 
tions acting just on the CTC system. 

Let the input state of the chronology-respecting system 
by \ipj). Before the interaction, the CTC system is in 
the state pctc> which must satisfy the self-consistency 
condition Eq. (|T|) for \tp) — The state of the output 
system will be given by Eq. We first show how to 
satisfy self-consistency. If we choose each Uk such that 

U k \*h) = \k) , (4) 

then the solution pctc = \k) (k\ satisfies the self- 
consistency condition and gives the desired output state. 
However, this is not enough by itself for the construction 
to work. We also need pctc to be unique. (More pre- 
cisely, p ou t needs to be unique. But uniqueness of Pctc 



is a sufficient condition for that.) We now show how to 
engineer the state of the CTC system and the output 
system to be unique. Suppose that the {Uk} satisfy the 
condition above. Consider a general state for pctc : 

Pctc = ^ Pmn l m ) ( n l ■ 

Plugging this expression into the self-consistency equa- 
tion (0 for 

Pctc with input state \ipj) and a unitary V 
of the above form, the matrix elements p mn must satisfy 

Pmn = ^Pkk (m| U k {tpj\ U\ \n) . (5) 

k 

We want to choose the unitaries {Uk} such that the 
unique solution to Eq. (j5| is pjj = 1, and all other ele- 
ments of pctc are zero. Let us focus on the jth diagonal 
element. Since Uj \tpj) — \j), we get 

For any k such that (j\ Uk\ipj) ^ 0, the above equation 
implies pkk = 0. If pkk = for all k ^ j, this implies 
that all off-diagonal terms are also zero, and therefore 
Pjj = 1, which is what we want. Therefore, a set of 
sufficient (but by no means necessary) conditions for a 
unique, self-consistent solution are as follows: 

1- Uk \ipk) — \k) for all k, and 

2- (j| U k \4>j) ^ for all j and k. 

Next we construct a set of unitaries {Uk} satisfying these 
two conditions. Let S = {li^j}} be the set of initial states. 
Choose a particular k. We will construct two orthonor- 
mal bases \b m ) and \c m ) for m = 1, . . . , N such that 

U k = ^ l Cm ) ( &m l ■ 

This will automatically make Uk unitary. We construct 
these bases in a series of steps. 

1. We need Uk\ipk) — \k). So choose |&i) = \tpk) an d 
\c\) = \k). Let us label the vector \if>k) as IV'i.i)- 

2. Pick another vector from the set S. Label this vector 
\ip2.i)- Perform a Gram-Schmidt orthogonalization with 
this vector to construct orthonormal basis vector 1 1>2 ) - 

\b*) = ^{\^2,i)-\bx){bi\^,x)). 

3. Now find all the vectors in the set S that are in the 
space spanned by |&i) and I&2), including at least |^2,i), 
but excluding IV'i.i)- Suppose there are 7712 such vectors. 
Label these vectors 1^2,1) > ^2,2) , ■ ■ ■ , | - 02,m 2 )- Construct 
the basis vector \c2}' 

1 f m2 \ 
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where the labels j2.n stand for the indices of the vectors 
\ip2,n) in the set. Note that fa) is also orthogonal to |ci). 

4. We now iterate this procedure. Suppose we have con- 
structed t basis vectors , . . . , |6 t ) and \ci) , . . . , |c t ). 
We construct \b t +i) and \c t +\) as follows. Pick a state 
from S that has not yet been used. Label this state 
|V't+i.i)- Perform a Gram-Schmidt orthogonalization 
using this state and the already constructed vectors 
\bi) , . . . , |& t ) to make the orthonormal basis vector \b t +\): 

\h+i) = ~ fi^+i.i) - E ( & «i^+i,i>^) • 

5. Take all the vectors from S that have not yet been 
used and that are contained in the subspace spanned by 

, . . . , |fof+i). Suppose there are mt+i of them. Label 
these vectors IV't+i.i) , ■ ■ ■ > \?Pt+i,m, t+1 )- Now construct 
the new basis vector |c t +i): 

1 f mt+1 \ 
|c*+l> = . 2_\ \jt+l,n) ■ 

6. Repeat steps 4 and 5 until all the vectors in the set S 
have been used. If this has not yet produced a complete 
basis, choose any sets of orthonormal vectors to complete 
{\b m )} and {|c m )}. 

7. Now repeat this entire construction for every Uk- From 
step 1 we get condition 1: Uk \ipk) — \k). From the way 
we construct the \c m ) (in steps 3 and 5), we see that 
(j\Uk\">Pj) ^ for all j and k, so both self-consistency 
and uniqueness are assured. □ 

Implications for the Holevo bound — As a final note, 
we point out that a CTC-assisted party can violate the 
Holevo bound [10]. Suppose that Alice chooses to send 
one of the four states {|0) , |1) , |+) , |— )} to Bob over a 
noiseless quantum channel. A CTC-assisted Bob can em- 
ploy the method in the previous section to distinguish Al- 
ice's state perfectly and can then access two classical bits 
of information. This ability to access two classical bits 
violates the Holevo bound of one classical bit per qubit. 
Indeed, using a set of 2 n non-orthogonal states would al- 
low Alice to send n classical bits via a single noiseless 
qubit, if Bob uses the above measurement procedure. 

Conclusion — We have shown how to exploit closed 
timelike curves to distinguish non-orthogonal states. 
Two direct implications are that one could break any 
prepare-and-measure quantum key distribution protocol 
as well as violate the Holevo bound. If CTC qubits are 
treated as a free resource, then the achievable classi- 
cal communication rate with a single noiseless quantum 
transmission is unbounded. We conjecture that the addi- 
tion of any nonlinearity to quantum mechanics, such as 
that considered in Ref. [T2] , could be exploited similarly. 



There are at least three ways to consider the implica- 
tions of the results in this Letter. First, note that even 
if our universe contains no stable wormholes, the exis- 
tence of microscopic, short-lived closed timelike curves 
can still revolutionize information processing tasks if they 
persist long enough to engineer specific unitary inter- 
actions with qubits traveling their worldlines. Second, 
while issues such as the grandfather paradox are resolved 
by Deutsch's formalism for stochastic and quantum bits 
traveling along closed timelike curves [3J, the eroding 
of a finite capacity for classical communication with a 
qubit is a strong information theoretic argument cast- 
ing doubt on the allowed existence of CTCs (similar in 
vein to the quantum communication complexity argu- 
ment in Ref. [13]) ■ A third tack is to consider whether 
Deutsch's fixed point solution for resolving CTC para- 
doxes is itself somehow flawed. If the formalism is in- 
validated, then computational complexity results such as 
Pctc = PSPACE [6] should be reexamined. Any theory 
of quantum gravity will need to reconcile this intersection 
of quantum information theory and general relativity. 

Finally, it should be interesting to study the effect of 
noise on the physical processes outlined in this Letter. 
For instance, how stable are these maps to perturbations 
in the input states? Recent work utilizing the Hciscn- 
berg picture may be a useful approach [14]. We conjec- 
ture that a CTC-assisted party can construct a universal 
doner with fidelity approaching one, at the cost of in- 
creasing the available dimensions in ancillary and CTC 
resources. One area of future work could be to optimize 
this fidelity given CTC resources of fixed dimension. 
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